Your network is behind a UPnP port-restricted NAT

I have tried EVERYTHING at this point. I was able to get my NAT open for about a week, and without me changing any settings on anything, it changed back to moderate. I just got the new Netgear Nighthawk router that just came out recently and portforward.com
doesn't have any information on my router, nor does the Xbox Support router forum yet. I'm hoping someone with Netgear Genie experience can hopefully confirm if I have the router set correctly with the ports and whatnot.

• I have a Netgear R7000 Nighthawk Router, latest firmware.
• My connection type is WIRED. My provider is Xfinity.
• I have ensured that my Xbox One console has a static IP address.
• I have opened the following ports in the Advanced > Advanced Setup > Portforwarding/Port Triggering settings of my router: 3074 (TCP/UDP), 88 (UDP), 53 (TCP/UDP), 500 (UDP), 3544 (UDP), 4500 (UDP), and 1863 (TCP/UDP). Note: both starting and ending internal
  and external ports are all the same ports listed.
• I have toggled UPnP on and off in the router settings, power cycled both modem and router, turned UPnP on again, power cycled again. I even tried turning UPnP off completely (I have since turned it back on).
  
• I've run the multiplayer test numerous times, held the bumpers, and I get the same "Your network is behind a UPnP port-restricted NAT" message. The status code reads "0x40000000000". MTU is 1480
  
• Mic works sporadically in games, and hardly ever in Party Chat. Video also does not seem to work with Twitch, probably as a result of NAT.
  

Halp!

:)

 

Moderate or Strict Nat type, Xfinity Service provider and Netgear Nighthawk X6 r8000

Sorry, also forgot to mention that after UPnP is off it says "Your network is behind a port-restricted nat"

 

Port forwarding question

I have discovered why my X1 reports a Strict or Moderate NAT sometimes and it's after one of the 360s uses one of the ports the X1 needs. As soon as a Live port is used for a 360 via UPnP, 3074 for example, the X1 drops to Strict.

This is exactly the reason why I use UPnP, because if 360 1 is using 3074, UPnP will map 360 2 to a different port number that grants the same access as 3074 allowing both to communicate with the Live service at the same time, thus granting an Open NAT to all connected 360s. The X1 is not triggering port forwarding via UPnP to utilise this feature, so is the device that suffers when a 360 is in use.

The PS3 used to have a UPnP enable/disable option on the console itself, which I thought was odd, but perhaps if the 360 had this, enabling it would tell the console to use UPnP, which once it uses UPnP to trigger the ports I'm sure it will resolve the multiple device issue.

For reference:

• When I have an Open NAT, the X1's Detailed NAT Information says: Your network is behind a cone NAT
• When I have a Moderate NAT, the X1's Detailed NAT Information says: Your network is behind a port-restricted NAT
• When I have a Strict NAT, the X1's Detailed NAT Information says: Your network is behind a port-preserving port-symmetric NAT

 

Also, another weird thing is that when I disconnect the Wired connection and go Wireless, my NAT is magically open. When I go back to Wired connection, it's back to Moderate NAT.

 

Annnnnnd now wireless changed to Moderate by itself without me touching anything. Anyone? Please help.

 

Have you actually tried disabling UpnP and forwarding ports? Have you gone through xbox's troubleshooter?

 

Yes, cleared cache, ran through the trouble shooter, and ran it directly to the Gateway too. Just got an idea though, going to try one more thing. Either way I'll update the thread with my findings so hopefully this will lead to help for others with the
same setup.

 

I figured it out. I have one of those Arris combo modem/gateway/wifi routers and the only reason I use it is because of the telephone service. Anyways, awhile back, I had called Xfinity to put it into Gateway mode to turn off the WiFi so I could use my
own router. I realized after XboxSupport3 suggested plugging the CAT5 directly from the gateway, that maybe the router functions are somehow still working. It was also then that I remembered that the gateway should have more than one ethernet port, and it
did.

1. I ran the ethernet cable from the Arris gateway (using one of the spare ethernet ports) to my Xbox One console.
   
2. I logged into the modem by typing 10.0.0.1 in my address bar of my browser.
3. Once logged in, I set up port forwarding using the ports above, and static IP rules for the console, instead of doing it through the Netgear Nighthawk R7000 router. Even though the router functions were disabled.
   
4. Saved everything, rebooted modem, rebooted router, cleared cache on the Xbox One console, restarted and presto! I'm living in a cone NAT paradise.
   
5. Finished writing up a support forum thread and now proceeding to go pwn with friends.
   

 

I have the same Firehawk router and I can't get my X1 out of moderate NAT, can you "dumb this down" for me because I have no idea about this stuff. Thank you

 

1st time I hear about firehawk router. Don't know the specifics of ot, better check on the bottom of the router there should be exact model and manufacturer, providers like to stick their custom names on there.

Steps to take to fix this since routers layout are usually the same.

First of all go to settings on the xbox.-> Network settings -> advanced settings -> write down everything you have under ip address/subnet mask/gateway.(On the right side)

Put ip settings to manual and reenter everything there as it was, just change the ending of the ip address itself, for example if its 192.168.0.1 add +10 to the ending so put 192.168.0.11 for example, subnet mask and gateway remain the same.

Then go to a computer or a laptop, open internet explorer and type in the gateway address as a website so instead of www.xbox.com you put in 192.168.0.1 (most often used gateway).

It will ask for username and password. (I have no idea what they might be, search on the internet for default ones for your model/router or it might be a on a sticker on the router itself where it shows your wireless password and wireless name but router
passwords and wireless passwords are not one and the same)

Then on the router go to advanced and then find DMZ or WAN setupid, depending on what tab it is. Basically your searching for DMZ host or Dmz default server or anything that is saying DMZ. Turn it on and then 2 things might happen, it will tell you to enter
ip address (4 boxes, you put in the one that you set up on the xbox 192.168.0.11) or it will have a drop down menu, where xbox one will appear as XBOX OS or Unknown device 192.168.0.11. Either way just set it up correctly and click apply.

After you did that unplug the power from the router for 30 settings and plug back in. After its done restart the xbox also, no real need to power cycle then go to the xbox -> settings -> network -> advanced -> alternative mac address -> reset. It will restart
the xbox.

 

Maybe an incredibly old thread but it helped me. thank you very much

 

Hey there Simms87,

Glad to hear the troubleshooting in this thread helped you out! If you have any other Xbox Support related questions, please feel free to create a new thread detailing what you're experiencing. This way you can receive support catered specifically to you
from our community. Thanks in advance!